Centrify Identity Service, App EditionQuestion:
After a user account is disabled in Active Directory, changes to the user object no longer synchronize to Office 365 (ie. removing email aliases, hide from address book, etc.). Is this expected behavior when using Centrify provisioning?Answer:
This is expected behavior. Centrify provisioning does not currently support sync of disabled user accounts. To allow user changes to sync with Office 365, the administrator must re-enable the user account for synchronization to complete. Once the sync has completed and attributes are up to date, the administrator can disable the user in Active Directory again. How to manually update user records in Office 365 using PowerShell (non Federated Users only):
Administrators can log into the Office 365 tenant using Azure PowerShell and then update or remove the attributes manually.
For support or information on connecting to your Office 365 tenant using PowerShell, please refer to Microsoft Support services or the following TechNet article (provided for convenience purposes only):Getting started with Office 365 PowerShell
For more information on configuring Office 365 provisioning, please refer to the Centrify Online Help section: Office 365 Provisioning with Centrify Identity Service